[jitsi-users] Some questions on Jitsi-videobridge


#1

Hi,

I am evaluating Webrtc media servers, and have some questions on Jitsi
video bridge.

1. Can Jitsi video bridge run behind NAT/firewall with a STUN/TURN server
without changing network configuration?

My basic understanding of Jitsi video bridge is that it has ICE capability,
thus it should be able to run behind NAT/firewall if we configure STUN/TURN
server for ICE.

If not, why and is there any plan to support this?

2. I would like to integrate Jitsi video bridge into an Java application
server so customer only needs to download/install one server instead of
two, is it possible and how hard it is? Any suggestions and pointers are
appreciated.

Thanks in advance for the help,

/Kaiduan


#2

Correct. It can run behind a NAT, obtaining its public addresses either:
1. By static configuration
2. Through the AWS API, if it happens to be running in AWS
3. Through a STUN server

See here for mode details:
https://github.com/jitsi/ice4j/blob/master/doc/configuration.md#mapping-harvesters

Regards,
Boris

···

On 23/01/2017 18:19, Kaiduan Xie wrote:

Hi,

I am evaluating Webrtc media servers, and have some questions on Jitsi
video bridge.

1. Can Jitsi video bridge run behind NAT/firewall with a STUN/TURN
server without changing network configuration?

My basic understanding of Jitsi video bridge is that it has ICE
capability, thus it should be able to run behind NAT/firewall if we
configure STUN/TURN server for ICE.


#3

Boris,

Thanks for quick reply, can we specify a TURN server too? I am thinking to
run jitsi video bridge behind firewall.

/Kaiduan

···

On Mon, Jan 23, 2017 at 7:49 PM, Boris Grozev <boris@jitsi.org> wrote:

On 23/01/2017 18:19, Kaiduan Xie wrote:

Hi,

I am evaluating Webrtc media servers, and have some questions on Jitsi
video bridge.

1. Can Jitsi video bridge run behind NAT/firewall with a STUN/TURN
server without changing network configuration?

My basic understanding of Jitsi video bridge is that it has ICE
capability, thus it should be able to run behind NAT/firewall if we
configure STUN/TURN server for ICE.

Correct. It can run behind a NAT, obtaining its public addresses either:
1. By static configuration
2. Through the AWS API, if it happens to be running in AWS
3. Through a STUN server

See here for mode details:
https://github.com/jitsi/ice4j/blob/master/doc/configuration
.md#mapping-harvesters

Regards,
Boris

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#4

The bridge supports ICE/TCP (e.g. on port 443) natively. We use it with the bridge behind a NAT, and with clients behind NAT/firewalls all the time.

I don't see a reason why clients couldn't also use a TURN server, but I haven't actually seen it done with jitsi-videobridge.

Boris

···

On 24/01/2017 09:34, Kaiduan Xie wrote:

Boris,

Thanks for quick reply, can we specify a TURN server too? I am thinking
to run jitsi video bridge behind firewall.


#5

I do not want to open an inbound 443 TCP port for video bridge, the client
of courses can use TURN server. But if the client and video bridge are both
behind restrictive NAT where only outbound 80/443 TCP is allowed, then
video bridge needs to support TURN.

···

On Tue, Jan 24, 2017 at 10:54 AM, Boris Grozev <boris@jitsi.org> wrote:

On 24/01/2017 09:34, Kaiduan Xie wrote:

Boris,

Thanks for quick reply, can we specify a TURN server too? I am thinking
to run jitsi video bridge behind firewall.

The bridge supports ICE/TCP (e.g. on port 443) natively. We use it with
the bridge behind a NAT, and with clients behind NAT/firewalls all the time.

I don't see a reason why clients couldn't also use a TURN server, but I
haven't actually seen it done with jitsi-videobridge.

Boris

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users